Payment terminal system and method of use

ABSTRACT

A payment terminal, including: a display, an input device configured to generate input signals indicative of a user input, a payment instrument reader configured to receive payment instrument data from a financial payment instrument, a secure processor connected to the payment instrument reader, a main processor connected to the display, the main processor separate and distinct from the secure processor, a secure input processor connected to the input device and the secure processor, wherein the secure processor is operable between an unsecured mode, wherein the secure processor sends input coordinates based on the input signals received from the secure input processor to the main processor; and a secured mode, wherein the secure input processor ceases input coordinate forwarding to the main processor.

CROSS-REFERENCE TO RELATED APPLICATIONS

This application is a continuation of U.S. patent application Ser. No.15/635,462, filed 28 Jun. 2017, which is a continuation of U.S. patentapplication Ser. No. 14/743,356, filed 18 Jun. 2015, now issued as U.S.Pat. No. 9,721,247, which is a continuation of U.S. patent applicationSer. No. 14/526,033, filed 28 Oct. 2014, now issued as U.S. Pat. No.9,092,766, all of which are incorporated in their entirety by thisreference.

TECHNICAL FIELD

This invention relates generally to the payment instruments field, andmore specifically to a new and useful payment terminal in the paymentinstruments field.

BRIEF DESCRIPTION OF THE FIGURES

FIGS. 1A and 1B are schematic representations of the payment terminal inthe secured and unsecured mode, respectively.

FIG. 2 is an isometric view of a variation of the payment terminal.

FIG. 3 is a power rail diagram of a specific example of the paymentterminal.

FIG. 4 is a side view representation of a variation of the paymentterminal resting on a support surface.

FIG. 5 is an exploded cutaway view of a variation of the paymentterminal.

FIG. 6 is an exposed wireframe view of a variation of the paymentterminal.

FIG. 7 is a schematic representation of a variation of the paymentterminal interacting with peripheral devices, a remote system, and auser device with a wireless payment instrument.

FIG. 8 is a schematic representation of a variation of the paymentterminal displaying a display element and interacting with a paymentcard.

FIG. 9 is a schematic representation of a variation of the paymentterminal interpreting input coordinates in light of a coordinate map.

FIG. 10 is an end on view of a variation of the payment terminalincluding a printer, wherein the printer door is in an openconfiguration.

FIG. 11 is an isometric view of a variation of the payment terminalincluding a printer, wherein the printer door is in an openconfiguration.

FIG. 12 an isometric view of a variation of the payment terminalincluding a printer interacting with printing substrate, wherein theprinter door is in an open configuration.

FIG. 13 is a schematic representation of a variation of the paymentterminal including a printer dispensing printed substrate.

FIG. 14 is a schematic representation of a variation of the paymentterminal including a first and second camera, and a position sensor.

FIGS. 15-19 are schematic representations of different variations of thepayment terminal.

FIGS. 20A and 20B are schematic representations of a variation of thepayment terminal including a secure side that rotates about a rotationalaxis parallel to the junction in a first and second position,respectively.

FIGS. 21A and 21B are schematic representations of a variation of thepayment terminal including a secure side that rotates about a rotationalaxis perpendicular to the junction in a first and second position,respectively.

DESCRIPTION OF THE PREFERRED EMBODIMENTS

The following description of the preferred embodiments of the inventionis not intended to limit the invention to these preferred embodiments,but rather to enable any person skilled in the art to make and use thisinvention.

As shown in FIGS. 1A and 1B, the payment terminal 1 includes a securedisplay 240, a secure input device 230 associated with the securedisplay 240, a secure processor 210 connected to the secure input device230, and a main processor 110, distinct from the secure processor 210,which is connected to the secure display 2400. The payment terminal 1functions to provide standard-compliant payment processing (e.g.,PCI-complaint payment processing) while enabling access to themerchant-level information. In particular, the payment terminal 1 canfunction to receive and process payment information in astandard-compliant manner. The payment terminal 1 can additionallyfunction to collect payment information associated with orders ortransactions for the merchant. The payment terminal 1 can additionallyfunction as a platform through which third party applications can accessand/or process the payment information. The payment terminal 1 canadditionally function to automatically determine a type of payment usedby a customer, and initiate different consumer payment flows based onthe payment type. The payment terminal 1 can additionally function tointegrate non-secure payment methods (e.g., cash, payment instruments50, rewards cards, etc.) into the same payment flow as secured paymentmethods. The payment terminal 1 can additionally function to interfacewith peripheral devices, such as legacy payment devices (e.g.,pre-existing cash boxes, scanners, etc.), new payment devices, customertraffic trackers, or any other suitable peripheral device. The paymentterminal 1 can additionally function to extract information fromnon-payment instruments, such as drivers licenses, QR codes, or anyother suitable information source. Examples of extracted information useinclude: unique identification of a user for a non-transaction use(e.g., identity verification during voting or by police, loyalty accountidentification, coupon retrieval or application, etc.), advertisingcampaign planning, customer purchase prediction, customer trafficprediction, employee performance tracking, employee acquisitionplanning, automated loan application, automated credit verification,automated settlement, automated accounting, automated or semi-automatedtax preparation, automated inventory ordering, automated salerecommendations, or any other suitable transaction-related businessfunctionality.

1. Potential Benefits

This payment terminal 1 can confer several benefits over conventionalsystems. First, the payment terminal 1 enables application interactionwith transaction data generated by conventional payment terminals 600(e.g., data manipulation) by introducing a main processor 110. Second,the payment terminal 1 can alter the payment terminal user experience byintroducing a customer-facing touchscreen display, such that theterminal 1 is no longer a merchant-only device. Introducing acustomer-facing touchscreen display can additionally confer the benefitof enabling a dynamically adjustable interface. Third, the paymentterminal 1 enables both desktop and mobile use by introducing wirelesspayment information communication and by forming a handle 310 from itscomponent parts.

2. Auxiliary Systems and Components

The payment terminal 1 can be used with a payment instrument 50 thatfunctions to store financial transaction information that functions as apayment authenticating piece used to carry out a financial transaction.The payment instrument 50 can be a payment card, a token, or any othersuitable payment instrument. The payment card can be a credit card,debit card, gift card, fund transfer card, or any other suitablefinancial transaction card. The token can be a secure element, such as asecure element chip or a virtual element, an integrated circuit (e.g.,an IC card, such as an EMV card), or any other suitable token.

The payment terminal 1 can receive, process, and transmit sensitiveinformation and non-sensitive information. Sensitive information can bea set of information required to complete a financial transaction,access a confidential account, or any other suitable information.Examples of sensitive information can include the full paymentinstrument identifier (e.g., full credit card number), a PIN number, averification code, a social security number, or any other suitablesensitive information. Non-sensitive information can be any informationthat is not considered sensitive. Examples of non-sensitive informationcan include the cart items, the transaction amount, the transactiontime, the customer name or other identifier, issuer identifier, lastfour digits of a payment card identifier, or any other suitablenon-sensitive information.

Transmitting information can include sending information, broadcastinginformation, or otherwise communicating information. Sending informationcan include passing the information to a limited, predetermined set ofendpoints (e.g., a single endpoint) in a targeted manner (e.g., througha targeted distribution channel), wherein endpoints outside of thepredetermined set do not receive the information. Broadcastinginformation can include sending the information or an event associatedwith the information to multiple endpoints (e.g., all endpoints) througha common distribution channel, such as by putting the information on acommon bus. Any endpoint connected to the common distribution channelcan subsequently receive and/or the information from the source.However, information can be otherwise transmitted from sources toendpoints.

The payment terminal 1 can function to generate or otherwise processorder information. Order information can include transactioninformation, cart or product information (e.g., product identifier,number of each product, etc.), customer identifiers, merchantidentifiers, employee identifiers, order status (e.g., completed, open,paid but not picked up, etc.), or any other suitable order information.Transaction information can include a transaction identifier,transaction amount, merchant information, customer identifier, paymenttype, terminal identifier, and/or any other suitable information aboutthe transaction. The transaction identifier can be universally unique,unique to the merchant, unique to the customer identifier, generic, orbe defined in any other suitable manner.

The payment terminal 1 can interact with a payment verification system(payment entity) that functions to verify payments or otherwisefacilitate payment verification. The payment verification system can bethe payment instrument 50 (e.g., the IC chip or secure element), apayment gateway, a payment processor, a financial service provider(e.g., a credit card provider, bank, etc.), or be any other suitableentity or system capable of verifying or facilitating verification of apayment.

As shown in FIG. 7, the payment terminal 1 can interact with a remotesystem 40 which functions to store merchant information. The remotesystem can additionally or alternatively function to facilitate paymentverification, wherein the remote system can send secured paymentinformation to the payment verification system. The secured paymentinformation can be received from the payment terminal 1, or beautomatically generated by the remote system. The merchant informationcan be sensitive information, non-sensitive information, or acombination thereof. The merchant information can include orderinformation, transaction information, customer information, merchantaccount information, user account information for users associated withthe merchant (e.g., employee accounts), permissions for user applicationaccess, permissions for application information access, permissions fororder information access (e.g., authorization, authentication, etc.),terminal activation control, or any other suitable merchant information.The remote system can be a remote computing system or be any othersuitable system. The payment terminal 1 can be connected to the remotesystem through a wired connection (e.g., LAN, cable, etc.) or wirelessconnection (e.g., WiFi, cellular, Bluetooth, etc.).

The payment terminal 1 can function to secure information. Securinginformation can include obfuscating information, encrypting information(e.g., using symmetric key encryption, public key encryption, etc.), orotherwise securing the information.

3. Payment Terminal Components and Variations

As shown in FIG. 8, the secure display 240 (customer display, firstdisplay) of the payment terminal 1 functions to display orderinformation, user interface elements, targets, windows for user inputreceipt, or any other suitable image to a user. In some variations ofthe payment terminal 1 (e.g., those with a single display), the securedisplay 240 can additionally function as the merchant display, whereinthe processor controlling secure display operation (e.g., the mainprocessor 110) can dynamically shift secure display control between afirst and second distinct kernel, switch operation modes between asecured and unsecured mode, or otherwise shift control of the securedisplay 240 based on user selections (e.g., a payment initiationselection) and/or information received at the secure processor 210(e.g., payment instrument detection). The secure display 240 can be anLCD display, LED display, plasma display, OLED display, or any othersuitable display. The secure display 240 can define a broad face havinga longitudinal axis and lateral axis. The secure display 240 can beplanar, curved, or have any other suitable broad face configuration. Thesecure display 240 can be substantially rectangular (e.g., square orwith a length longer than a width), triangular, circular, or have anyother suitable profile. The secure display 240 is preferably controlledby the main processor 110, but can alternatively be controlled by aprocessor that is separate and distinct from the main processor 110. Thesecure display 240 is preferably controlled by a secure display resourceof the main processor 110, but can alternatively be controlled by apayment resource or any other suitable resource of the main processor110. In a specific example, the secure display 240 can only becontrolled by the main processor 110. However, the secure display 240can be controlled by any other suitable component. The secure display240 can be connected to the main processor 110 by a wired connection,such as a display cable, display bus, male/female connection (e.g., PCIexpress, etc.), MIPI, or any other suitable wired connection, or awireless connection, such as Bluetooth, BLE, NFC, or any other suitablewireless communication system.

The secure input device 230 (customer input device, secure input, firstinput device) of the payment terminal 1 functions to receive a userinput and convert the user input into input signals 231 (e.g.,measurements) indicative of the user input. In some variations of thepayment terminal 1 (e.g., those with a single display or input device),the secure input device 230 can additionally function as the merchantinput device, wherein the processor controlling secure display operation(e.g., the secure input processor 220) can dynamically switch operationmodes or otherwise shift operation based on user selections (e.g., apayment initiation selection) and/or information received at the secureprocessor 210 (e.g., payment instrument detection).

The secure input device 230 is preferably associated with the securedisplay 240, wherein the user input measurements generated by the secureinput device 230 are translated into selection information based on theactual or anticipated image or interface (display element 242)concurrently displayed on the secure display 240 during measurementreceipt. However, the secure input device 230 can be associated with anyother suitable display.

The secure input device 230 is preferably connected to the secureprocessing system 200, more preferably the secure input processor 220but alternatively the secure processor 210 or any other suitableprocessor. Alternatively or additionally, the secure input device 230can be connected to the main processor 110, main input processor 140, orany other suitable processor. The secure input device 230 preferablyonly sends the measurements or other signals to the connected processor,but can alternatively or additionally send the measurements to any othersuitable endpoint. The secure input device 230 can additionally becontrolled by the connected processor, wherein the connected processorcan control power provision to the secure input device 230, control orinstruct the secure input device 230 to introduce signal noise into themeasurement, or control or instruct the secure input device 230 tooperate in any other suitable manner. The secure input device 230 canreceive power directly from a power source 600, such as a charging port630 or a power storage unit (e.g., battery), receive power indirectlyfrom the power source 600 through the connected processor, or be poweredin any suitable manner. The secure input device 230 can be connected tothe secure processor 210 by a wired connection, such as a cable, bus,male/female connection, MIPI, or any other suitable wired connection, ora wireless connection, such as Bluetooth, BLE, NFC, or any othersuitable wireless communication system.

The secure input device 230 is preferably operable in a single mode(e.g., a secured mode), but can alternatively operate between a securedmode and an unsecured mode, or between any other suitable set of modes.In the secured mode, the secure input device 230 can secure (e.g.,obfuscate) the measurements sent to the secure input processor 220,secure processor 210, other component of the secure processing system200, main processor 110, or any other suitable destination. In theunsecured mode, the secure input device 230 can send unsecuredmeasurements to the secure input processor 220, secure processor 210,other component of the secure processing system 200, main processor 110,or any other suitable destination. The secure input device operationmode can be controlled by the secure input processor 220, a separate anddistinct processor or driver, or by any other suitable control system.The secure input device operation mode can be the same as (e.g.,reflect) the connected processor operation mode, or can be independentof the connected processor operation mode.

The secure input device 230 can be a touchscreen 232, a pointing device,a keyboard, a sound input (e.g., a microphone), or any other suitableinput device. The secure touchscreen can function to enable a user tointeract directly with what is displayed on the secure display 2400. Thepointing device, keyboard, or other input devices can enable the user tointeract indirectly with what is displayed on the secure display 2400.The secure touchscreen is preferably overlaid over the secure display240, such that touch coordinates registered by the secure touchscreencan be mapped to pixel sets, digital interaction elements, or othervirtual targets displayed on the secure display 2400. The securetouchscreen preferably has substantially the same dimensions as thesecure display 240, but can alternatively be larger (e.g., extend overall or a portion of the display bezel) or smaller. The securetouchscreen preferably has a similar pixel density as the secure display240, but can alternatively be denser (e.g., 3 times denser) or sparser.The secure touchscreen is preferably substantially aligned with thesecure display 240, such that the touchscreen longitudinal axis andlateral axis are substantially aligned with the secure display 240longitudinal axis and lateral axis. However, the secure touchscreen canbe misaligned with the secure display 240 (e.g., with an offset centralnormal axis), or aligned in any other suitable orientation. The securetouchscreen can include a broad face, wherein the secure touchscreenbroad face is substantially parallel the secure display broad face.Alternatively, the secure touchscreen can be arranged in any suitableconfiguration relative to the broad face.

The touchscreen can be a resistive touchscreen, surface acoustic wavetouchscreen, capacitive touchscreen, infrared grid touchscreen, infraredacrylic projection touchscreen, optical imaging touchscreen, dispersivesignal technology touchscreen, acoustic pulse recognition touchscreen,or utilize any other suitable touchscreen technology. Examples ofcapacitive touchscreens include a surface capacitance touchscreen,projected capacitance touchscreen, such as mutual capacitancetouchscreen or self-capacitance touchscreen, or any other suitablecapacitive touchscreen. In a specific example, the touchscreen is a PINtransaction security (PTS)-compliant and/or PIN encryption device(PED)-compliant touchscreen. The measurements or signals output by thetouchscreen are preferably touch measurements, and can include thecapacitance change for each of a plurality of touchscreen points,capacitor, or any other suitable measurement location. However, themeasurements or signals can be determined from the position of a switch,a potential voltage magnitude, a change in the voltage magnitude, thecurrent magnitude, the current frequency, or from any other suitablesignal.

The touchscreen can include one or more layers. In one variation, thetouchscreen includes a translucent top layer including a metalliccoating along a first surface, an adhesive spacer proximal the firstsurface, a translucent bottom layer including metallic coating along asecond surface proximal the first surface, and a translucent mountinglayer. The touchscreen is preferably substantially transparent, but canalternatively have any other suitable translucidity. The top and bottomlayers can be formed from the same materials or different materials. Thetop and/or bottom layers can be formed from polymer (e.g., polyester,PEG, etc.), glass, or any other suitable substrate material. Thetouchscreen can additionally include a polarizing filter that functionsto limit the viewing angle, coupled along a second surface of the toplayer opposing the first surface, the first surface of the top layer,the first or second surface of the bottom layer, along the broad face ofthe display proximal the touchscreen, or along any other suitablesurface. The touchscreen can include a first broad face extending overthe respective display broad face, more preferably proximal the displayactive surface but alternatively along any other suitable portion of thedisplay.

The secure processor 210 of the payment terminal 1 functions to performa predefined set of functionalities. The secure processor 210 canadditionally function to determine whether received information includessensitive information, separate the sensitive information fromnon-sensitive information, secure sensitive information, or otherwiseprocess received information. Application interaction (e.g., reading,writing, editing, and/or deletion) from all or some of the memory andprocesses connected to or supported by the secure processor 210 ispreferably limited to a predetermined set of main processor modules(e.g., standard-certified or compliant modules, such as the paymentmodule), but can alternatively be entirely prevented or otherwiselimited. The secure processor 210 can be dynamically updated (e.g.,wherein the secure processor 210 receives encrypted update informationfrom the main processor 110) or be otherwise adjusted in any othersuitable manner. The secure processor 210 is preferably separate (e.g.,forming or viewed as a unit apart or by itself) and distinct (e.g.,recognizably different in nature) from the main processor 110, but canalternatively be separate from the main processor 110, distinct from themain processor 110, be a portion (e.g., a core) of the main processor110, be a sub-processing module of a processor that also supports themain processor 110, or have any other suitable relation to the mainprocessor 110. The secure processor 210 can be supported on a differentchipset, different circuit board, different core, different kernel,different thread, or otherwise separated and/or distinguished from themain processor 110. The secure processor 210 can be standard-compliant,standard-certified, standard-signed, otherwise compliant with a paymentindustry security standard, or be non-compliant with industry standards.Examples of a payment card industry standard includes PCI DSS (PaymentCard Industry Data Security Standard), PCI P2PE, PTS, or EMVCo, but anyother suitable payment industry security standard can be used. Thesecure processor 210 can include or be associated with secure memory(e.g., volatile memory, non-volatile memory, etc.), wherein the securememory can be separate and distinct, integrated with, or be the same asthe main memory. The secure memory can store encryption keys, coordinatemaps (e.g., for input coordinate interpretation when the terminal is inthe secured mode), firmware, certificates, or any other suitableinformation. The secure memory can be read only, write only, read/write,or have any other suitable functionality.

The secure processor 210 can be connected to the secure input device230, wherein the secure processor 210 can receive information from thesecure input device 230. In one variation, the secure processor 210 canbe indirectly connected to the secure input device 230 through anintermediary processor, such as a secure input processor 220 (e.g.,secure touch processor). In this variation, the received information caninclude a set of input coordinates (e.g., touch coordinates, selectioncoordinates). The set of input coordinates can be determined from themeasurements (e.g., input signals) by the intermediary processor, orotherwise determined. The set of input coordinates can be secured orunsecured (e.g., by the intermediary processor or secure input device230). However, the received information can additionally oralternatively include any other suitable information. In this variation,the secure processor 210 can be selectively operatively connected to thesecure input device 230 by the intermediary processor or continuouslyoperatively connected to the secure input device 230 by the intermediaryprocessor. The secure processor 210 can receive secure input deviceinformation (e.g., input signals, input coordinates, etc.) from theintermediary processor when operatively connected to the secure inputdevice 230, and cannot receive secure input device information from theintermediary processor when not operatively connected to the secureinput device 230. The secure processor 210 can be prevented fromreceiving secure input device information when not operatively connectedto the secure input device 230, or simply not sent secure input deviceinformation by the intermediary processor. The secure processor 210 canbe virtually prevented from receiving the secure input deviceinformation, such as by implementing a firewall or virtuallydisconnecting the secure processor 210 from the secure input device 230,physically prevented from receiving the secure input device information,such as by disconnecting the secure processor 210 from the secure inputdevice 230 (e.g., by changing the state of a switch), or otherwiseprevented from receiving secure input device information.

In a second variation, the secure processor 210 can be directlyconnected to the secure input device 230. In this variation, thereceived information can include all or a portion of the measurementsfrom the secure input device 230. However, the secure processor 210 canbe otherwise connected to and receive information from the secure inputdevice 230.

The secure processor 210 can additionally be connected to the paymenthardware 250. The secure processor 210 can be directly connected to thepayment hardware 250, indirectly connected to the payment hardware 250(e.g., through a secure financial information processor, in a similarmanner to indirect secure processor connection with the secure inputdevice 230, as discussed above), or otherwise connected to the paymenthardware 250. When the terminal 1 includes a secure financialtransaction processor, the secure financial information processor canreceive information (e.g., payment instrument data or information,identification information, etc.) from the payment hardware 250,determine whether the information is sensitive, and send the informationto the secure processor 210 in response to the financial informationbeing sensitive information, and to the main processor 110 in responseto the financial information being non-sensitive information.Alternatively, these functionalities can be performed by the secureprocessor. The secure financial transaction processor can be operableonly in the secured mode, or can be operable between a secured mode andan unsecured mode, or operate between any suitable set of operationmodes. However, the secure financial transaction processor can operatein any other suitable manner. The secure financial transaction processorcan be separate and/or distinct from the secure processor 210,integrated with the secure processor 210, integrated with the mainprocessor 110, or otherwise configured.

The secure processor 210 can be operatively connected to the paymenthardware 250, or be otherwise connected. When the secure processor 210is operatively connected to the payment hardware 250, the secureprocessor 210 can receive all or a portion of the information determinedby the payment hardware 250. The secure processor 210 can additionallyor alternatively control payment hardware operation when operativelyconnected to the payment hardware 250. The secure processor 210 ispreferably continuously operatively connected to the payment hardware250, but can alternatively be selectively operatively connected to thepayment hardware 250 (e.g., by an intermediary payment hardware 250processor), only connected to the payment hardware 250 by a powerconnection, or otherwise connected to the payment hardware 250.

The secure processor 210 can additionally be connected to the mainprocessor 110. The secure processor 210 can be directly connected to themain processor 110, indirectly connected to the main processor 110(e.g., in a similar manner to indirect secure processor connection withthe secure input device 230, as discussed above), or otherwise connectedto the main processor 110. The secure processor 210 can be operativelyconnected to the main processor 110, or be otherwise connected. When thesecure processor 210 is operatively connected to the main processor 110,the secure processor 210 can only send information 202 (e.g., data) tothe main processor 110. Alternatively, the secure processor 210 can onlyreceive information from the main processor 110 when operativelyconnected. Alternatively, the secure processor 210 can both send andreceive information to and from the main processor 110 when operativelyconnected. Alternatively, the secure processor 210 can be limited toonly receiving information from the main processor 110 when operativelyconnected to the main processor 110. The secure processor 210 ispreferably continuously operatively connected to the main processor 110,but can alternatively be selectively operatively connected to the mainprocessor 110, only connected to the main processor 110 by a powerconnection, or otherwise connected to the main processor 110.

The secure processor 210 is preferably connected to the main processor110 by a single connection 800, but can alternatively be connected tothe main processor 110 by multiple connections. The connection 800preferably includes both power and data connections, but canalternatively only include a power or data connection. The connectioncan be a two-way connection (e.g., send data to and from bothendpoints), or be a one-way connection (single-direction connection,e.g., only transmit data in one direction from a source to adestination), or be any other suitable type of connection. Theconnection 800 is preferably a physical connection, such as a wire, bus,or board-to-board connection, but can alternatively be a wirelessconnection, such as a short-range data connection (e.g., NFC, Bluetooth,BLE, RF, IR, etc.) or long-range data connection (e.g., WiFi, Zigbee,Z-wave, etc.), or be any other suitable connection. In a specificexample, the connection can be a USB connector, FireWire connector, orany other suitable wired connector. The connection 800 can additionallyinclude a hardware security module, be formed from optical fiber, beconfigured to sever in response to physical tampering, or be secured inany other suitable manner. In one variation of the payment terminal 1,the secure processor 210 only outputs information to the main processor110, and otherwise only received inputs from other terminal components.In a second variation of the payment terminal 1, the secure processor210 can output information (e.g., control information, etc.) to otherterminal components. The connector preferably extends across thejunction, but can alternatively extend along any other suitable portionof the terminal 1.

The secure processor 210 preferably operates in a single mode, morepreferably the secured mode, but can alternatively operate between asecured mode and an unsecured mode, or between any other suitable set ofmodes. In the secured mode, the secure processor 210 can secure (e.g.,encrypt, obfuscate, etc.) all information output by the secure processor210 (output information), a subset of the output information (e.g., onlyinformation determined to be secure information, such as informationsatisfying a condition indicative of sensitive information, etc.), orany other suitable portion of the output information. In the unsecuredmode, the secure processor 210 can output (e.g., send, transmit,broadcast, etc.) unsecured output information. When the secure processor210 is operable between a set of operation modes, the secure processoroperation mode is preferably controlled by the secure processor 210 butcan alternatively be controlled by the main processor 110 or by anyother suitable control system.

The secure processor 210 is preferably arranged proximal the securedisplay 240, but can alternatively be arranged proximal the main display120, proximal the secure input device 230, proximal the main inputdevice 160, or arranged in any other suitable location. The secureprocessor 210 is preferably arranged with a broad face substantiallyparallel the respective display broad face, but can alternatively bearranged in any suitable orientation. The secure processor 210 can besubstantially centered with the respective display, offset from therespective display, be arranged proximal an end of the respectivedisplay (e.g., along the display longitudinal axis), or otherwisearranged.

The secure input processor 220 (first input processor) of the paymentterminal 1 functions to interpret measurements determined at the secureinput device 230 into secure reference coordinates. The referencecoordinates 221 can be input coordinates (e.g., touchscreencoordinates), display coordinates, or any other suitable reference pointthat can subsequently be used to determine a user selection withreference to the image or interface concurrently displayed on the securedisplay 240 during measurement registration. In a specific example, theuser selection can be determined based on a coordinate map 244associated with the concurrently displayed image or interface, as shownin FIG. 9. However, the user selection can be determined in any othersuitable manner. The secure input processor 220 can be connected to thesecure input device 230, wherein the secure input processor 220 canreceive information from the secure input device 230 only (e.g., througha one-way connection), both send and receive information to and from thesecure input device 230 (e.g., control information, etc. through atwo-way connection), send information to the secure input device 230only, or be otherwise operatively connected to the secure input device230. The secure input processor 220 can be connected to the secure inputdevice 230 by a wired connection, such as a cable, bus, male/femaleconnection, or any other suitable wired connection, or a wirelessconnection, such as Bluetooth, BLE, NFC, or any other suitable wirelesscommunication system. The secure input processor 220 can be can bestandard-compliant, standard-certified, standard-signed, otherwisecompliant with a payment industry security standard, or be non-compliantwith industry standards.

In one variation, the secure input processor 220 is a secure touchprocessor that functions to convert touch signals (e.g., changes incapacitance) to the reference coordinates 221. In another variation, thesecure input processor 220 is a secure device processor that functionsto determine a virtual pointer position relative to the imageconcurrently displayed on the secure display 2400. However, the secureinput processor 220 can be any other suitable input processor.

The secure input processor 220 can additionally function to secure thereference coordinates 221, or any other suitable information output bythe secure input processor 220. The secure input processor 220 cansecure all information output by the secure input processor 220, secureoutput information only when operating in the secure mode, or secureinformation based on any other suitable operation parameter.

The secure input processor 220 can additionally function to selectivelydetermine the endpoint for the reference coordinates 221. The secureinput processor 220 is preferably operable between a secured and anunsecured mode, but can alternatively be operable only in the securedmode, in the unsecured mode, or between any suitable set of operationmodes. The secure input processor operation mode is preferablyindependent of the secure processor 210 (e.g., even when the secureinput processor 220 is an integral module of the secure processor 210),but can alternatively be the same as the secure processor operationmode. The secure input processor operation mode is preferably determined(and/or controlled) by the secure input processor itself, but canalternatively be determined by the secure processor 210, the mainprocessor 110, or any other suitable component.

In the secured mode, the secure input processor 220 is preferablyoperatively connected to and sends reference coordinates to the secureprocessor 210, but can alternatively send the reference coordinates 221to any other suitable endpoint. In a first variation, the secure inputprocessor 220 operating in the secured mode broadcasts the referencecoordinates 221 to all connected endpoints. In this variation, thesecure input processor 220 can encrypt the reference coordinates 221prior to broadcasting, wherein only endpoints with the decryption key(e.g., the secure processor 210) can read the information. In a secondvariation, the secure input processor 220 operating in the secured modeonly sends the reference points to the endpoints that are operativelyconnected to the secure input processor 220. In this variation, thesecure input processor 220 can selectively operatively connect ordisconnect different endpoints, such that only the secured processor canbe operatively connected to the secure input processor 220 operating inthe unsecured mode, both the secure and main processor 110 can beconcurrently operatively connected to the secure input processor 220operating in the unsecured mode, or any suitable endpoint can beoperatively connected to the secure input processor 220 operating in thesecured mode. In a specific example of the payment terminal 1, thesecure input processor 220, operating in the secured mode, only sendsthe reference coordinates 221 to the secure processor 210, and does notsend the reference coordinates 221 to the main processor 110. In thisexample, the secure processor 210 can be operatively connected to thesecure input processor 220 and the main processor 110 can be operativelydisconnected from the secure input processor 220. However, the secureinput processor 220 can operate in any suitable manner while in thesecured mode.

In the unsecured mode, the secure input processor 220 is preferablyoperatively connected to and sends reference coordinates to the mainprocessor 110, but can alternatively send the reference coordinates 221to any other suitable endpoint. In a first variation, the secure inputprocessor 220 operating in the unsecured mode broadcasts the referencecoordinates 221 to all connected endpoints. In a second variation, thesecure input processor 220 operating in the unsecured mode only sendsthe reference points to the endpoints that are operatively connected tothe secure input processor 220. In the second variation, only the mainprocessor 110 can be operatively connected to the secure input processor220 operating in the unsecured mode, both the secure and main processor110 can be concurrently operatively connected to the secure inputprocessor 220 operating in the unsecured mode, or any suitable endpointcan be operatively connected to the secure input processor 220 operatingin the unsecured mode. In a specific example of the payment terminal 1,the secure input processor 220, operating in the unsecured mode, onlysends the reference coordinates 221 to the main processor 110, and doesnot send the reference coordinates 221 to the secure processor 210. Inthis example, the main processor 110 can be operatively connected to thesecure input processor 220 and the secure processor 210 can beoperatively disconnected from the secure input processor 220. However,the secure input processor 220 can operate in any suitable manner whilein the unsecured mode.

The secure input processor 220 or secure processor 210 is preferablyoperable between the secured and unsecured modes in response to a secureevent and/or an unsecure event. The secure input processor 220 canoperate in the secured mode in response to detection of the secure eventor the absence of the unsecure event, and can operate in the unsecuredmode in response to detection of the unsecure event or the absence ofthe secure event. The secure event can include payment initiationnotification 203 receipt, payment initiation notification activation(e.g., received from the main processor 110), secure informationcollection notification (e.g., received from the secure processor 210 inresponse to detection of secure information from the payment hardware250 or determination that secure information is to be collected),notification that a secure user interaction flow is being initiated(e.g., notification that a payment flow has been initiated), request fora PIN entry (e.g., determined based on the payment instrument or basedon the payment amount, wherein the payment amount exceeds a thresholdamount), or any other suitable event indicative of a need for the secureprocessor 210 to receive reference coordinates. The unsecure event caninclude payment initiation notification deactivation, notification thata secure user interaction flow is being ended (e.g., notification that apayment flow has been ended), or any other suitable event indicative ofa need for the main processor 110 to receive reference coordinates, orthe end of the need for the secure processor 210 to receive referencecoordinates. The secure input processor 220 or secure processor 210 canoperate in the unsecured mode by default, and switch to secure modeoperation in response to determination of the secure event.Alternatively, the secure input processor 220 or secure processor 210can operate in the secured mode by default, and switch to unsecured modeoperation in response to determination of the unsecure event.

The secure input processor 220 is preferably a separate and distinctprocessor from the secure processor 210, but can alternatively beintegrated into the same circuit board, chipset, kernel, thread, or be amodule of the secure processor 210. However, the secure input processor220 can be otherwise configured. In a first variation, the secure inputprocessor 220 can be only connected to the secure processor 210, whereinthe secure processor is operable between the secured and unsecured modeand selectively forwards reference coordinates to the main processor. Ina second variation wherein the secure input processor 220 is separateand distinct from the secure processor 210, the secure input processor220 can be connected to both the main processor 110 and the secureprocessor 210. The secure input processor 220 can be only operativelyconnected to the secure processor 210 in the secure mode, and onlyoperatively connected to the main processor 110 in the unsecured mode,but can be otherwise connected. The secure input processor 220 can beconnected to the secure processor 210 by a wired connection, such as acable, bus, male/female connection, or any other suitable wiredconnection, or a wireless connection, such as Bluetooth, BLE, NFC, orany other suitable wireless communication system. In a third variationwherein the secure input processor 220 is integrated with the secureprocessor 210, the secure input processor 220 can be always operativelyconnected to the secure processor 210, wherein the secure processor 210can be selectively operatively connected to the main processor 110between the secured and unsecured modes, or selectively secureinformation sent to the main processor 110 between the secured andunsecured modes. In a fourth variation, the secure input processor 220can be a separate and distinct processor from the secure processor 210,but be only connected to the secure processor 210, wherein the secureprocessor 210 can determine and/or selectively secure input deviceinformation (e.g., reference coordinates) to pass to the main processor110. In this variation, the terminal 1 can include a secure processingsystem 200 that includes the secure processor 210, secure inputprocessor 220, and/or secure financial transaction processor. However,the secure input processor 220 can be connected to processing endpointsand operate in any other suitable manner.

The secure input processor 220 is preferably arranged proximal thesecure processor 210, but can alternatively be arranged proximal thesecure display 240, main display 120, secure input device 230, maininput device 160, or arranged in any other suitable location. The secureinput processor 220 is preferably arranged with a broad facesubstantially coplanar with a secure processor broad face, but canalternatively be arranged with the broad face parallel the secureprocessor 210 broad face, parallel the respective display broad face, orarranged in any suitable orientation.

The main processor 110 of the payment terminal 1 functions as the maincomputing system of the payment terminal 1. The main processor 110 canbe a CPU, set of CPUs or any other suitable processing system. The mainprocessor 110 is preferably separate and distinct from the secureprocessor 210 or any other suitable component of the secure processingsystem 200, but can alternatively be integrated with the secureprocessor 210 or secure processing system 200. The main processor 110can include or be associated with main memory (e.g., volatile memory,non-volatile memory, etc.), wherein the main memory can be separate anddistinct, integrated with, or be the same as the secure memory. The mainmemory can function to store and/or support applications, displayelements, transaction or order information, permissions, or any othersuitable piece of information. The main memory can be read only, writeonly, read/write, or have any other suitable functionality.

The main processor 110 is preferably arranged proximal the main display120, but can alternatively be arranged proximal the secure display 240,proximal the main input device 160, proximal the secure input device230, or arranged in any other suitable location. The main processor 110is preferably arranged with a broad face substantially parallel thedisplay broad face, but can alternatively be arranged in any suitableorientation. The main processor 110 is preferably arranged proximal anend of the respective display (e.g., along the display longitudinalaxis), but can alternatively be substantially centered with therespective display or otherwise arranged. In one variation, the mainprocessor 110 can be arranged proximal the connector of the maindisplay, proximal the junction, or arranged in any other suitablelocation.

The main processor 110 of the payment terminal 1 functions to controlthe secure display 240. In one example of main processor secure displaycontrol, the main processor 110 can control which images or interfacesare displayed on the secure display 240. In a second example of mainprocessor secure device control, the main processor 110 can polarize orotherwise limit the visual angle of the images displayed on the deviceduring sensitive information entry or display, wherein sensitiveinformation entry or display can be associated with a predeterminedsubset of images (e.g., PIN number entry, social security numberdisplay, cart item list, signature screen, welcome screen, etc.). Adistinct resource on the main processor 110 preferably controls thesecure display 240, but the secure display 240 can be controlled by anyother suitable portion of the main processor 110. The distinct resourcecan be secured or unsecured, and can be standard-compliant,standard-certified, standard-signed, otherwise compliant with a paymentindustry security standard, or be non-compliant with industry standards.

The main processor 110 can additionally or alternatively function toreceive information from the secure input processor 220, and process thereference coordinates 221 into user interface elements, alphanumericcharacters, or other functional information 211. The main processor 110preferably processes the reference coordinates 221 into functionalinformation using a coordinate map 244 associated with the imagedisplayed concurrently with user input receipt (e.g., the image that wasdisplayed at the timestamp associated with the measurements), but canalternatively process the reference coordinates 221 in any othersuitable manner.

The main processor 110 can additionally or alternatively function tocontrol a main display 120, a main input device 160, a printer 500, apower source 600, one or more wireless communication modules 190, one ormore sensors 400, indicators, memory, and/or any other suitablecomponent. The main processor 110 is preferably connected, morepreferably continuously or selectively operatively connected to therespective component, but can alternatively otherwise control thecomponent.

The main processor 110 can additionally or alternatively function tostore and execute applications (e.g., native applications, browserapplications, etc.), wherein the applications can substantially freelyread, write, edit, and/or delete from all or some of the memory andprocesses connected to or supported by the main processor 110. The mainprocessor 110 can additionally or alternatively function to processpayments, generate payment initiation notifications, and/or control thepayment flow. The main processor 110 can additionally or alternativelyfunction to receive secured information from the secure processor 210,and send the secured information to the remote system 40 and/or paymentgateway. The main processor 110 can additionally or alternativelyfunction to receive, store, and/or communicate unsecured informationfrom the secure processor 210 to a remote system. The main processor 110can additionally function to generate or determine process flow events,such as payment initiation events, transaction completion events, or anyother suitable event, and can additionally extract non-sensitiveinformation from the events. The main processor 110 can additionallyfunction to interface (e.g., send or receive information) with a remotesystem.

The payment terminal 1 can additionally include a main display 120(second display) that functions to display application data (e.g., thirdparty application data, native application data, etc.), browser data, orany other suitable data. The main display 120 is preferably a merchantdisplay (e.g., intended for the merchant to view and interact withinformation), but can alternatively be used by the customer. Thedisplayed information is preferably non-sensitive data, but canalternatively or additionally be sensitive data. The main display 120can be a LCD display, LED display, plasma display, OLED display, or anyother suitable display. The main display 120 can define a broad facehaving a longitudinal axis and lateral axis. The main display 120 can beplanar, curved, or have any other suitable broad face configuration. Themain display 120 can be substantially rectangular (e.g., square or witha length longer than a width), triangular, circular, or have any othersuitable profile. The main display 120 is preferably larger than thesecure display 240, but can alternatively be substantially the same sizeor smaller. In a specific variation, the main display 120 isapproximately three times the size of the secure display 240.

The main display 120 is preferably connected to the main processor 110,but can alternatively be connected to any other suitable component. Themain display 120 is preferably controlled by only the main processor 110(i.e., operatively connected to the main processor 110), but canalternatively or additionally be controlled by any other suitablecomponent. The main display 120 can be connected to the main processor110 by a wired connection, such as a display cable, display bus,male/female connection (e.g., PCI express, etc.), or any other suitablewired connection, or a wireless connection, such as Bluetooth, BLE, NFC,or any other suitable wireless communication system.

The main display 120 is preferably mounted to the secure display 240,but can alternatively be separate and distinct from the secure display240 (e.g., located on a separate system). In a first variation, the maindisplay 120 is statically mounted to the secure display 240. The maindisplay 120 is preferably statically mounted to the secure display 240at an obtuse angle (e.g., at 120°, 150°, etc.) but can alternatively bemounted to the secure display 240 at an acute angle (e.g., 0°, 30°, 45°,60°), a normal angle (e.g., 90°), mounted coplanar to the secure display240, or mounted to the secure display 240 at any other suitableorientation. The main display 120 is preferably mounted to the securedisplay 240 with the respective display active surfaces oriented awayfrom (e.g., distal) each other, but can alternatively be mounted to thesecure display 240 with the respective active surfaces toward (proximal)each other, with the respective active surfaces directed in the samedirection, or arranged in any other suitable configuration. The maindisplay 120 and secure display 240 are preferably coupled with therespective orientation vectors 80 directed away from each other (e.g.,in a mutually opposing orientation, separated by the coupling angle,etc.), but can alternatively be coupled with the respective orientationvectors directed toward each other, arranged in parallel and directed inthe same direction, or arranged in any other suitable orientation. Afirst edge of the main display 120 is preferably joined to a first edgeof the secure display 240, but the secure display 240 canalternativelybe joined to the body of the main display 120 (e.g., to theback face opposing the active surface 122, between a first and secondopposing edge) or the main display 120 can alternatively be joined tothe body of the secure display 240. However, the main display 120 andsecure display 240 can be joined along any other suitable portion of therespective displays.

In a first specific example, a lateral edge of the main display 120 canbe joined to a longitudinal edge of the secure display 240. In thisexample, the orientation vector of the main display 120 can besubstantially parallel the respective longitudinal edge, and theorientation vector of the secure display 240 can be substantiallyparallel the respective lateral edge. In a second specific example, alateral edge of the secure display 240 can be joined to a longitudinaledge of the main display 120. In this example, the orientation vector ofthe secure display 240 can be substantially parallel the respectivelongitudinal edge, and the orientation vector of the main display 120can be substantially parallel the respective lateral edge. However, theorientation vectors can be otherwise configured. In a third specificexample, a longitudinal edge of the main display 120 can be joined to alongitudinal edge of the secure display 240. In this example, theorientation vectors of the main display 120 and secure display 240 canbe substantially parallel the respective longitudinal edges. In a fourthspecific example, a longitudinal edge of the main display 120 can bejoined to a longitudinal edge of the secure display 240, wherein theorientation vectors of the main display 120 and secure display 240 canbe substantially perpendicular the respective longitudinal edges. In afifth specific example, a lateral edge of the main display 120 can bejoined to a lateral edge of the secure display 240, wherein theorientation vectors of the main display 120 and secure display 240 canbe substantially perpendicular the respective lateral edges.

In a second variation, the secure display 240 can be translationallymounted to the main display 120. The secure display 240 preferablyrotates relative to the main display 120 about a rotational axis, butcan alternatively slide laterally or longitudinally along atranslational axis, or translate relative to the main display 120 in anyother suitable manner. The rotational axis is preferably parallel to thejunction 320 between the secure display 240 and the main display 120(e.g., extend along the junction 320, be offset from the junction 320),as shown in FIGS. 20A and 20B, but can alternatively be perpendicular tothe junction 320 between the main display 120 and secure display 240, asshown in FIGS. 21A and 21B, or be positioned at any suitable anglerelative to the junction 320.

The payment terminal 1 can additionally include a main input device 160(second input device), which functions to receive a user input andconvert the user input into measurements indicative of the user input.The main input device 160 is preferably associated with the main display120, wherein the user input measurements generated by the main inputdevice 160 are translated into selection information based on the actualor anticipated image or interface concurrently displayed on the maindisplay 120 during measurement receipt. However, the main input device160 can be associated with any other suitable display. The main inputdevice 160 is preferably substantially similar to the secure inputdevice 230, but can alternatively be any other suitable input device, asdisclosed above.

The main input device 160 is preferably connected to the main processor110, but can alternatively be connected to a main input processor 140(which, in turn, can be connected to the main processor 110), the secureprocessor 210, the secure input processor 220, or any other suitableprocessor. The main input device 160 preferably only sends themeasurements or other signals to the connected processor, but canalternatively or additionally send the measurements to any othersuitable endpoint. The main input device 160 can additionally becontrolled by the connected processor, wherein the connected processorcan control power provision to the main input device 160, control orinstruct the main input device 160 to introduce signal noise into themeasurement, or control or instruct the main input device 160 to operatein any other suitable manner. The main input device 160 can receivepower directly from a power source 600, such as a charging port 630 or apower storage unit (e.g., battery), receive power indirectly from thepower source 600 through the connected processor, or be powered in anysuitable manner. The main input device 160 can be connected to therespective processor by a wired connection, such as a cable, bus,male/female connection, or any other suitable wired connection, or awireless connection, such as Bluetooth, BLE, NFC, or any other suitablewireless communication system.

The main input device 160 is preferably operable in a single mode (e.g.,an unsecured mode), but can alternatively be operable between a securedmode and an unsecured mode, or between any other suitable a set ofmodes. In one variation of the payment terminal 1, the main input device160 can register measurements in the unsecured mode, and can be turnedoff (e.g., disconnected from power), switched into a standby mode, orotherwise prevented from registering measurements in the secured mode.

The main input device 160 can be a touchscreen, a pointing device, akeyboard, a sound input (e.g., a microphone), or any other suitableinput device. The main touchscreen 162 can function to enable a user tointeract directly with what is displayed on the main display 120. Thepointing device, keyboard, or other input devices can enable the user tointeract indirectly with what is displayed on the main display 120. Themain touchscreen is preferably overlaid over the main display 120, suchthat touch coordinates determined by the main touchscreen can be mappedto pixel sets, digital interaction elements, or other virtual targetsdisplayed on the main display 120. However, the main touchscreen can bearranged in any other suitable position relative to the main display120. The main touchscreen preferably has substantially the samedimensions as the main display 120, but can alternatively be larger(e.g., extend over all or a portion of the display bezel) or smaller.The main touchscreen is preferably substantially aligned with the maindisplay 120, such that the main touchscreen longitudinal axis andlateral axis are substantially aligned with the main display 120longitudinal axis and lateral axis. However, the main touchscreen can bemisaligned with the main display 120 (e.g., with an offset centralnormal axis), or aligned in any other suitable orientation. The maintouchscreen can include a broad face, wherein the main touchscreen broadface is substantially parallel the main display broad face.Alternatively, the main touchscreen can be arranged in any suitableconfiguration relative to the broad face. The main touchscreen ispreferably substantially similar to the secure touchscreen, but canalternatively be any other suitable touchscreen, as disclosed above.

The payment terminal 1 can additionally include a main input processor140 (second input processor) that functions to interpret measurementsregistered by the main input device 160 into main reference coordinates.The reference coordinates 221 can be input coordinates (e.g.,touchscreen coordinates), display coordinates, or any other suitablereference point that can subsequently be used to determine a userselection with reference to the image or interface concurrentlydisplayed on the main display 120 during measurement registration. In aspecific example, the user selection can be determined based on acoordinate map 244 associated with the concurrently displayed image orinterface. However, the user selection can be determined in any othersuitable manner.

The main input processor 140 can be connected to the main input device160, wherein the main input processor 140 can receive information fromthe main input device 160 only (e.g., through a one-way connection),both send and receive information to and from the main input device 160(e.g., control information, etc. through a two-way connection), sendinformation to the main input device 160 only, or be otherwiseoperatively connected to the main input device 160. The main inputprocessor 140 can be connected to the main input device 160 by a wiredconnection, such as a cable, bus, male/female connection, or any othersuitable wired connection, or a wireless connection, such as Bluetooth,BLE, NFC, or any other suitable wireless communication system.

In one variation, the main input processor 140 is a main touch processorthat functions to convert touch signals (e.g., changes in capacitance)to the reference coordinates 221. In another variation, the main inputprocessor 140 is a main device processor that functions to determine avirtual pointer position relative to the image concurrently displayed onthe main display 120. However, the main input processor 140 can be anyother suitable input processor.

The main input processor 140 is preferably operable in a single mode(e.g., an unsecured mode), but can alternatively be operable between anunsecured and secured mode, or between any other suitable set of modes.In the unsecured mode, the main input processor 140 preferably sendsunsecured main reference coordinates, determined from the main inputdevice 160 measurements, to the main processor 110. However, the maininput processor 140 can send the main reference coordinates to thesecure processor 210 or to any other suitable endpoint in the unsecuredmode. In the secured mode, the main input processor 140 can be turnedoff, switched to a standby mode, or otherwise prevented from processing(e.g., interpreting) measurements in the secured mode. The main inputprocessor 140 preferably operates in the secured mode in response tosecure processor operation in the secured mode, but can alternativelyoperate in the secured mode independently of secure processor operation,such as in response to payment initiation determination, paymentinstrument 50 coupling to the payment hardware 250, or in response toany other suitable event.

The main input processor 140 is preferably a separate and distinctprocessor from the main processor 110, but can alternatively beintegrated into the same circuit board, chipset, kernel, thread, or be amodule of the main processor 110. However, the main input processor 140can be otherwise configured. The main input processor 140 can beconnected to the main processor 110 by a wired connection, such as acable, bus, male/female connection, or any other suitable wiredconnection, or a wireless connection, such as Bluetooth, BLE, NFC, orany other suitable wireless communication system. The main inputprocessor 140 can alternatively be integrated with the main processor110. However, the main input processor 140 can be connected toprocessing endpoints and operate in any other suitable manner.

The main input processor 140 is preferably arranged proximal the mainprocessor 110, but can alternatively be arranged proximal the securedisplay 240, main display 120, secure input device 230, main inputdevice 160, or arranged in any other suitable location. The main inputprocessor 140 is preferably arranged with a broad face substantiallycoplanar with a main processor broad face, but can alternatively bearranged with the broad face parallel the main processor broad face,parallel the respective display broad face, or arranged in any suitableorientation.

The payment terminal 1 can additionally include a set of paymenthardware 250 (financial transaction information inputs, payment reader,payment instrument reader) that function to receive payment informationfrom a financial payment instrument, such as a credit card, debit card,mobile device, token, or secure element. The payment hardware 250 canadditionally function to receive auxiliary information from otherinformation sources. For example, the payment hardware 250 can receiveinformation from any card including a magnetic stripe, IC chip, NFCtransmitter 256, barcode, QR code, Bluetooth, BLE, image, or any othersuitable informational token.

The payment hardware 250 can be a card reader (e.g., payment cardreader), a secure element transceiver, a camera, scanner, short-rangecommunication transceiver, or any other suitable information input. Thecard reader can be a magnetic stripe reader, an IC chip reader 254, orany other suitable reader capable of extracting information from a card.The card reader preferably includes a body and a card opening (cardaperture) configured to receive an inserted card. The payment hardware250 can be a single-system reader capable of extracting information froma single type of information storage (e.g., a magnetic stripe reader),or can be a hybrid-system reader capable of extracting information frommultiple types of information storage.

In a first variation, the payment hardware 250 can be a hybrid-systemcard reader including a magnetic stripe reader and an IC chip reader254. The magnetic stripe reader can be a 3-track head reader, a 2-trackhead reader, or any other suitable reader. The integrated circuit (IC)chip reader can include a set of contacts, a contactless reader, or anyother suitable IC chip reader 254. In a specific example, thehybrid-system card reader includes a body defining a card opening,wherein the card opening has a longitudinal axis extending along itslength. The magnetic stripe reader can be arranged along a firstlongitudinal edge of the card opening, proximal an end of the cardopening longitudinal axis, wherein the first longitudinal edge extendsalong a first broad face of the body. The IC chip reader 254 can bearranged proximal a first end of the body opposing the card opening,along a second broad face of the body opposing the first broad face.

The hybrid card reader 252 can additionally include a switch 257arranged at the first end of the body. The switch can be configured tobe operable in a coupled mode in response to card coupling with theswitch (e.g., indicating full card insertion), and in an uncoupled modewhen a card is not coupled to the switch. The switch can be coupled tothe secure processor (e.g., wherein the secure processor can generate anevent indicative of card coupling), an insertion confirmation output,such as a light or microphone, wherein the insertion confirmation outputoperation state (e.g., output light or sound) can be dependent on theswitch operation state. The switch can additionally be connected to thesecure processor 210 or payment hardware 250, wherein the secureprocessor 210 or payment hardware 250 can read information from the cardin response to switch operation in the coupled mode. However, the hybridcard reader 252 or payment hardware 250 can include any other suitablepayment instrument coupling indicator.

In one example of hybrid card reader operation, the connected processor(e.g., the secure processor 210) can dynamically determine the paymentinformation storage types available on an inserted card. In response tosubstantially or near-real time determination that the card includes anIC chip, the connected processor can instruct the main processor 110 todisplay instructions associated with IC chip payment flow (e.g., todisplay instructions to leave the card in, to display a PIN pad, etc.).In response to substantially or near-real time determination that thecard does not include an IC chip but does include a magnetic stripe, theconnected processor can instruct the main processor 110 to displayinstructions associated with magnetic stripe payment flow, wherein theconnected processor can control the magnetic stripe reader of the hybridcard reader 252 to read the magnetic stripe during card extraction fromthe card reader.

In a second variation, the payment hardware 250 can include an NFCtransceiver configured to facilitate NFC payment information transferbetween an NFC payment instrument and the payment terminal 1. The NFCtransceiver can include an antenna, wherein the antenna can extend alongall or a portion of the secure display 240, secure input device 230, oralong any other suitable portion of the payment terminal 1. The antennacan be arranged in the same plane as the respective display, behind thedisplay (e.g., distal the input device), or arranged in any othersuitable location.

The payment hardware 250 can define a reference plane. The referenceplane can be a broad face of a card reader body or chassis, a plane ofthe card reader opening, a plane of antenna winding, a plane extendingin parallel to the longitudinal axis of an antenna, a plane extendingperpendicular an antenna or coil central axis, or any other suitableplane. However, the payment hardware 250 can define a longitudinal axisor any other suitable reference point.

A payment hardware 250 can be arranged with the respective referenceplane or point extending along a side of the secure display 240 (e.g.,at a non-zero angle to the display broad face), an edge of the securedisplay broad face, a side of the main display 120, an edge of the maindisplay broad face, or arranged in any other suitable location on thepayment terminal 1. The payment hardware 250 can be arranged with therespective reference plane or point extending along a lateral edge,lateral side, longitudinal edge, or longitudinal side of the respectivedisplay. Alternatively, the payment hardware 250 can be arranged withthe respective reference plane extending along a broad face of therespective display. Alternatively, the payment hardware 250 can beseparate from the payment terminal 1. The payment hardware 250 ispreferably arranged proximal the secure display 240 and/or secure inputdevice 230, but can alternatively be arranged proximal the main display120 and/or main input device 160 in variations of the payment terminal 1including such components.

In a first example of payment hardware arrangement, the payment terminal1 can include a housing 300 joining an edge of a secure display 240 andan edge of a main display 120 with a junction 320. The payment hardware250 can be a card reader, wherein the card opening can be arranged alongthe junction 320, with the card opening longitudinal axis extending inparallel with the display edges joined by the junction 320. The cardreader body can be arranged with a broad face substantially parallel thesecure display broad face, substantially parallel the main display broadface, or at any other suitable angle relative to the main display orsecure display broad faces.

In a second example of payment hardware arrangement, the paymenthardware 250 can be a card reader, wherein the card opening can bearranged along a side of a secure display 240 or main display 120, withthe card reader body substantially parallel to the respective displaybroad face. The card reader can be arranged with the opening extendingalong a lateral side or longitudinal side. The display can include anorientation vector (e.g., wherein text or other objects displayed on thedisplayed are aligned relative to the orientation vector), wherein theopening can be arranged along the right side of the display, the leftside of display, the upper side of the display, or the lower side of thedisplay.

In a third example of payment hardware arrangement, the payment hardware250 can include an antenna. The antenna can be arranged within thehousing 300 or along the housing exterior. The antenna can extend alonga side of a secure display 240 or main display 120, along an edge of therespective display broad face, or along a junction 320 between thesecure display 240 and main display 120, or along any other suitableportion of the payment terminal 1. The antenna can be substantiallycoplanar with the respective display, or offset from the respectivedisplay.

The payment terminal 1 can include one or more pieces of paymenthardware 250. When the payment terminal 1 includes multiple paymenthardware 250, the payment hardware 250 are preferably not redundant, butcan alternatively be redundant and have multiple readers for a singleinformation storage type (e.g., multiple IC chip readers 254). When thepayment terminal 1 includes multiple payment hardware 250, the paymenthardware 250 can be arranged at one or more of the aforementionedlocations (e.g., colocalized or dispersed).

The payment hardware 250 is preferably connected to the secure processor210, but can alternatively be connected to a secure financialinformation processor, the main processor 110, and/or any other suitableprocessor. The payment hardware 250 can be operatively connected to onlythe secure processor 210, only the main processor 110, both the main andsecure processors 210, or to any other suitable component. Theconnection between the payment hardware 250 and the endpoint ispreferably a one-way connection, wherein the payment hardware 250 canonly send and not receive information, but can alternatively be atwo-way connection or any suitable connection. The connection ispreferably wired, but can alternatively be wireless. The paymenthardware 250 can be powered through the connection, or can be poweredthrough a separate power connection. The payment hardware 250 ispreferably continuously operatively connected to the endpoint, but canbe selectively operatively connected to the endpoint or connected in anyother suitable manner.

The payment terminal 1 can additionally include a printer 500 thatfunctions to print information on a substrate 570, as shown in FIG. 13.The processor is preferably controlled by the main processor 110, butcan alternatively be controlled by any other suitable processor. Theprinter 500 can include a printer body 510, a printer door 540, and aprint mechanism. The printer 500 can be operable between a high voltagemode wherein the printer 500 prints at full speed, and a low voltagemode wherein the printer 500 prints at partial speed (e.g., based on abaud rate sent by the main processor to the printer). In a specificvariation, the number of times the printer 500 can print in the highvoltage mode is limited when the payment terminal 1 is disconnected froma high-voltage power source 600 (e.g., a charging dock), wherein theprinter 500 operation switches to the low voltage mode after thethreshold number has been reached. However, the printer 500 can operatein any other suitable manner.

The printer body 510 of the printer 500 can define a printing substratereceptacle having a printer opening 520, wherein a printing substratestorage mechanism (e.g., a paper roll) can be inserted through theprinter opening 520 into the printing substrate receptacle, as shown inFIG. 12. The printing substrate receptacle can include a set of tracks,a set of grooves, a set of dimples, or any other suitable insertionguidance and/or substrate retention mechanism. The retention mechanismcan additionally be configured to permit substrate dispensation (e.g.,rotation about a dispensation axis). The printer opening 520 can includea first and second opposing edge, wherein the opposing edges can beparallel or have any other suitable relation. The printer body 510preferably traces the shape of the substrate storage mechanism, but canalternatively have any other suitable shape. In one variation of theprinter 500, the printer body 510 includes an arcuate surface.

The printer door 540 of the printer 500 functions to substantially sealthe printer opening 520, and is operable between an open position and aclosed position. In the printer opening 520 is preferably unobstructedwhen the printer door 540 is in the open position, and is preferablypartially or substantially entirely obstructed when the printer door 540is in the closed position. However, the printer door 540 can be operablebetween any other suitable set of positions, and can interact with theprinter opening 520 in any other suitable manner. The printer door 540preferably matches the profile of the printer body 510 (e.g., includessubstantially the same curvature), but can alternatively have adifferent profile. The printer door 540 preferably has substantially thesame dimensions as the printer opening 520, but can alternatively besmaller or larger.

The printer door 540 is preferably movably connected to the printer body510, but can be otherwise coupled to the printer body 510. The printerdoor 540 is preferably connected to a first edge of the printer opening520, more preferably a first longitudinal edge 530 of the printeropening 520, but can alternatively be connected to a first lateral edgeof the printer opening 520 or be connected to any other suitable portionof the printer body 510. A printer door 540 longitudinal edge ispreferably connected to the printer body 510, but a printer door 540lateral edge, corner, or broad face can alternatively be connected tothe printer body 510. The printer door 540 connector is preferably ahinge 580, such that the printer door 540 can actuate about a rotationalaxis substantially parallel to the first longitudinal edge of theprinter opening 520 or printer door 540, but can alternatively be aslot, clip, set of tracks (e.g., wherein the printer door 540 slidesalong the printer body 510 in a direction substantially perpendicularthe first longitudinal edge or slides along the printer body 510 in adirection substantially parallel the first longitudinal edge, etc.), orbe any other suitable actuatable coupling mechanism.

The print mechanism of the printer 500 functions to create asubstantially persistent human or computer-readable representation ofgraphics (e.g., QR codes) or text on the printing substrate 570. Theprinter mechanism 590 is preferably arranged distal the firstlongitudinal edge of the printer opening 520 (e.g., such that theprinted image is distal the first longitudinal edge), but canalternatively be arranged proximal the first longitudinal edge of theprinter opening 520 or arranged in any other suitable position. Theprint mechanism can be a toner-based, liquid inkjet, solid ink,dye-sublimation, thermal, laser, or any other suitable printingmechanism.

The printer 500 can additionally include a substrate gap 550 throughwhich the printing substrate can be dispensed (e.g., from the printer500 interior to the printer 500 exterior). In one variation, thesubstrate gap 550 can be cooperatively defined between the printer door540 and the printer body 510. In this variation, the printer door 540can be slightly smaller than the printer opening 520 along a lateralaxis, such that the printer door 540 leaves a gap between the printeropening 520 longitudinal edge and the printer door 540 longitudinal edgewhen the printer door 540 is in the closed position. However, theprinter door 540 can have any other suitable dimensions. The gap is canbe defined substantially parallel the retention mechanism support axis(e.g., the substrate storage winding axis), defined parallel alongitudinal axis of the arcuate surface, or extend along any othersuitable portion of the printer 500. The gap is preferably at least aswide as, if not longer than, the substrate width, but can alternativelybe equal or shorter. The gap is preferably defined along the second edgeof the printer opening 520 and/or printer door 540 opposing theconnection edge, but can alternatively be defined along an edge adjacentthe connection edge, be defined as an aperture through the printer door540 body, or be defined in any other suitable manner.

The printer 500 can additionally include a substrate separationmechanism 560 that functions to separate a first portion of thesubstrate from the remainder of the substrate stored in the substratestorage mechanism. The substrate separation mechanism 560 can be atoothed mechanism that functions to perforate and facilitate substratetearing, a shearing mechanism, or any other suitable separationmechanism 560. The printer 500 can include a first and second set oftoothed mechanisms arranged along the first and second edges of the gap,respectively (e.g., second edges of the printer door 540 and printeropening 520, respectively), such that the substrate can be separated byapplying force in a first or second direction, wherein the first andsecond directions can be at an angle to the longitudinal axes of thefirst and second toothed mechanisms, respectively. However, the printer500 can include a single set of toothed mechanisms arranged along theedge of the printer door 540 or the printer opening 520, or include anysuitable number of substrate separation mechanisms 560 arranged in anyother suitable location.

The printer 500 is preferably coupled to the main display 120 or securedisplay 240, such that the respective display and printer 500 are housedin a singular housing 300. However, the printer 500 can be housed in aseparate and distinct housing from the main display 120 or main housing.The printer 500 can be arranged along the edge of the respective displayactive surface, along the side of the respective display, along the edgeof the respective display back surface (surface opposing the activesurface), along the body of the respective display back surface, oralong any suitable portion of the respective display. In one example ofthe payment terminal 1, the printer 500 coupled along a portion of thesecure display back surface. In a specific example, the printer 500 canbe coupled along the secure display back surface, proximal a securedisplay edge distal the junction 320 between the secure display 240 andmain display 120. The printer 500 can occupy the entirety of the securedisplay back surface or a portion thereof. In the latter instance, theprinter body 510 can cooperatively form a void with the connecteddisplay and second display, wherein the void defined along therespective display back surface between the printer body 510 and thejoined second display functions as a hand support (e.g., cradle).However, the printer 500 can be arranged in any other suitable location(e.g., coupled to any other suitable portion of any other suitablecomponent) of the payment terminal 1. The printer body 510 canadditionally define a contact surface 340 distal the respective displayand substantially parallel the longitudinal axis, wherein the contactsurface 340 can be configured to support the respective display at apredetermined angle upon a supporting surface 10, such as a table.

The payment terminal 1 can additionally include a power source 600 thatfunctions to provide electrical power. The power source 600 can be apower storage unit, wireless power system (e.g., inductive chargingsystem, RF power system, etc.), renewable power system (e.g., solar,wind, piezoelectric, etc.), or any other suitable power source 600. Thepower storage unit can function to store electrical power, receiveelectrical power, convert electrical power to power suitable for thepayment terminal components, and/or otherwise interact with electricalpower. The power storage unit is preferably a battery, more preferably asecondary battery but alternatively a primary battery, but canalternatively be a fuel cell system (e.g., wherein power is stored in achemical form), or any other suitable power storage unit. The secondarybattery can have lithium chemistry (e.g., be lithium ion, lithiumpolymer, etc.), nickel cadmium chemistry, magnesium chemistry, or anyother suitable chemical composition. The power supply unit can bearranged proximal the main display 120, the secure display 240, or inany other suitable location. The power supply unit can be arranged witha power supply unit broad face substantially parallel the display broadface, wherein the power supply unit is preferably arranged proximal thedisplay back surface. In a specific example in which the paymentterminal 1 include a main display 120 joined to the secure display 240along a junction 320, the power supply unit can be arrangedsubstantially parallel one of the displays, proximal an end of therespective display distal the junction 320, as shown in FIG. 6. This canassist with weight distribution. In one variation of the paymentterminal, the mass of the battery is preferably offset by the mass ofthe printer across the junction. However, the weight distributionbetween the secure side and main side can be 50/50, 40/60, 30/70, 70/30,60/40, or have any other suitable distribution. However, the powersupply unit can be arranged in any other suitable location within thepayment terminal 1. The power supply unit can have a capacity of severalthousand mA/h (e.g., 5,000 mA/h, 1,000 mA/h, 10,000 mA/h, etc.), severalhundred mA/h (e.g., 500 mA/h, 100 mA/h, etc.), or any other suitablecapacity. However, any other suitable power supply unit can be used. Thepower supply unit can include one or more battery cells. The powerterminal can include one or more power supply units, no power supplyunits (e.g., wherein the power terminal can be powered on mains power),or any suitable number of power supply units.

The power source 600 is preferably electrically connected to all poweredcomponents of the payment terminal 1, such as the secure processor 210,secure display 240, secure input device 230, secure input processor 220,and main processor 110, and the main display 120, main input display,printer 500, sensors 400, communication modules 190, and/or any othersuitable component, if included. The power source 600 can be directlyconnected to the payment terminal components, but can alternatively beindirectly connected to the payment terminal components (e.g., whereinan intermediary component receives the power from the power source 600and sends the power to the endpoint component). However, power can beprovided in any other suitable manner.

The power source 600 can additionally include one or more chargingcontacts 620 that function to receive power from an outside source. Thecharging contacts 620 can additionally function to transfer information.For example, the payment terminal 1 can include a first set of highvoltage charging contacts 620 and a second set of charging contacts 620,wherein the first and second set of charging contacts 620 can both beelectrically connected to the power source 600. Examples of chargingcontacts 620 that can be used include power and data contacts (e.g.,male or female connectors), exposed contacts, inductive charging coils,or any other suitable power and/or data transfer system. The chargingcontacts 620 can additionally or alternatively be directly connected toa payment terminal component. For example, the first set of chargingcontacts 620 can be arranged along the printer body 510 and beelectrically connected to the printer 500, such that the printer 500 canbe directly powered by the first set of charging contacts 620, as shownin FIG. 11, but can alternatively be arranged in any other suitableposition. The second set of charging contacts 620 can additionallyfunction to transfer information (e.g., be a power and data port, suchas a USB port or FireWire port), and can be arranged proximal the mainprocessor 110, preferably between the main processor 110 and powersource 600 but alternatively in any other suitable location. However,the power source 600 can include any other suitable power connection.The charging contacts 620 are preferably arranged along the exterior ofthe payment terminal 1 (e.g., along the housing 300 body). The chargingcontacts 620 can be arranged proximal a contact surface 340, along aside of the terminal 1, or along any other suitable portion of theterminal 1. For example, the charging contacts 620 can be arrangeddistal the display connected to the printer 500, but can alternativelybe arranged proximal the display. In one variation, the chargingcontacts 620 are arranged along the curved face of the printer door5400. However, the charging contacts 620 can be arranged along theprinter body 510 or along any other suitable portion of the printer 500.In a second example, the charging contacts 620 can be arranged along anedge of the main display back surface, distal the junction 320 andproximal the respective contact surface 3400. However, the chargingcontacts 620 can be arranged in any other suitable position.

The power source 600 can additionally include one or more powerconversion circuits 640 that function to convert power source 600 powerto power suitable for the component. In one variation, the power source600 includes a boost converter (step-up converter) that functions toconvert battery power (e.g., 5V, 3V, etc.) to printer power (e.g., 9V).In a specific example, as shown in FIG. 3, the first set of chargingcontacts 620, printer 500, and boost converter are connected to a firstset of high voltage electrical rails, while the power source 600, secondset of charging contacts 620, processors, displays, and inputs areconnected to a second set of low voltage rails. The power source 600 canadditionally be connected to the boost converter and/or a buckconverter. However, the power circuitry can be connected in any othersuitable manner.

The payment terminal 1 can additionally include a set of communicationmodules 190. Each communication module 190 is preferably controlled bythe main processor 110, but can alternatively be controlled by thesecure processor 210 or by any other suitable processor. Thecommunication modules 190 are preferably connected to the power source600, but can alternatively be powered in any other suitable manner. Thecommunication module 190 preferably functions to communicate with aperipheral or remote device (e.g., the remote system). For example, thecommunication module 190 can function to communicate data with theremote system, determine inventory based on inventory-associatedsignals, receive application or software updates, connect to peripheraldevices 30 (e.g., printers 500, scanners, cash boxes, registers, etc.),user devices 2 (e.g., mobile devices), introduce connectivity tophysically connected devices, and/or enable any other suitablefunctionality.

The communication module 190 can simultaneously communicate withmultiple devices (e.g., with multiple channels), communicate with asingle device (e.g., includes only a single channel), with networkedapplication services, or communicate with any other suitable endpoint.The communication module 190 can additionally function as the paymenthardware 250, but the payment hardware 250 can alternatively be aseparate and distinct component. The communication module 190 ispreferably a transceiver and enables two-way (e.g., data transmissionand receipt), but can alternatively enable only one-way communication(e.g., only a transmitter capable of data transmission or only areceiver capable of data receipt). The communication modules 190 can bewired or wireless communication modules 190. The wired communicationmodule 190 can be a USB module (e.g., connector and circuit board),FireWire module, Lightning module, and/or any other suitable connectormodule. The wireless communication module 190 can be a WiFi module,cellular module, satellite module, RF module, IR module, Zigbee module,Bluetooth module, NFC module, or any other suitable module. The wirelesscommunication module 190 can additionally include one or more antennae.Each antenna can be arranged within the housing 300, along the surfaceof the housing 300, or arranged in any other suitable location. Theantennae can extend along a portion of a display length, display width,printer 500 length, or along any other suitable portion of the paymentterminal 1.

The housing 300 (casing) of the payment terminal 1 functions tomechanically protect and retain the payment terminal components. Thehousing 300 preferably substantially cooperatively encapsulates theprocessors, displays, printers 500, communication modules 190, sensors400, and/or any other suitable payment terminal component with thesecure input devices 230. However, the housing 300 can alternativelyenclose any other suitable portion of the payment terminal components.The housing 300 is preferably formed from a polymer, but canalternatively be formed from metal or any other suitable material.

The housing 300 can additionally define a set of contact surfaces 340that function to support the payment terminal 1 in a predeterminedorientation relative to support surface (as shown in FIG. 4), such as atable. The contact surface 340 can be defined along an end of thedisplay (e.g., a side of the display), a broad surface of the display, aportion of the printer body 510 (e.g., as discussed above), or along anyother suitable portion of the payment terminal 1. The contact surface340 is preferably substantially planar, but can alternatively be curved,angled, or have any other suitable configuration. The contact surface340 can be substantially smooth, include a friction-increasing material(e.g., rubber or sandpaper), include traction features (e.g.,protrusions, grooves, etc.), or include any other suitable surface.

The housing 300 can additionally include one or more drainage holes 350that function to drain liquids from the housing interior. The drainagehole is preferably arranged along the interior angle of the junction,but can alternatively be arranged along the surface of the housingdistal a display, along an end of the display, or along any othersuitable surface. The drainage hole can be an ovular aperture throughthe housing thickness, a set of holes or grooves through the housingthickness, or have any other suitable configuration. The drainage holecan additionally include a mesh or any other suitable covering, whichcan function to prevent substance ingress into the drainage hole.

The payment terminal 1 can additionally include a handle or restingsurface 310, which functions to provide a gripping surface or handsupport such that a user can hold the payment terminal 1. The handle 310can be a set of voids defined by the housing 300, a strap or movablepiece coupled to the handle 310 (e.g., wherein the housing 300 candefine a set of mounting points), or be defined in any other suitablemanner. In a first specific example, the handle 310 can be cooperativelydefined by the secure display 240, the main display 120, and the printerbody 510, as discussed above.

The payment terminal 1 can additionally include a set of sensors 400that function to measure payment terminal 1 parameters. The paymentterminal 1 parameters can include ambient parameters (e.g., ambienttemperature, pressure, light, sound, etc.), operational parameters(e.g., system temperature, power consumption, etc.), user parameters(e.g., biometric information, optical information, etc.), or any othersuitable parameters. Each sensor is preferably controlled by and/oroperatively connected to the main processor 110, but can alternativelybe controlled by and/or operatively connected to the secure processor210 or any other suitable processor. The set of sensors 400 can includelight sensors (e.g., camera 430, ambient light sensor, etc.), soundsensors (e.g., microphones), motion sensors (e.g., accelerometer,gyroscope, etc.), location sensors (e.g., GPS, GSM, cellulartriangulation, etc.), proximity sensors, biometric sensors (e.g., afingerprint reader), or any other suitable sensor. The payment terminal1 can additionally include additional visual outputs, audio outputs(e.g., speakers), or any other suitable output.

In one example, the payment terminal 1 includes a first and secondcamera. The first camera (customer camera) can be arranged proximal thesecure display 240, and the second camera (merchant camera) can bearranged proximal the main display 120. In a specific example, the firstcamera can be arranged with a camera active surface normal vector at anon-zero angle to the secure display active surface normal vector. Morepreferably, the first camera can be arranged with an active surfacenormal vector 432 directed substantially perpendicular a contact surfacebroad face, as shown in FIG. 14. However, the first camera can beotherwise arranged. The second camera is preferably arranged with anactive surface normal vector 432′ parallel the main display activesurface normal vector, but can be otherwise arranged. Both the first andsecond cameras can be operatively connected to the main processor 110,such that the main processor 110 receives the optical output from bothcameras. The main processor 110 can display the optical output of thefirst camera on the secure display 240, and can display the opticaloutput of the second camera on the main display 120. The main processor110 can additionally process the optical outputs of the first and/orsecond camera to identify items (e.g., QR codes, barcodes, etc.).

In a second example, the payment terminal operation mode can bedetermined based on the sensor measurements. The payment terminal 1 canbe operable between a desktop mode and mobile mode. The payment terminal1 can be operable in the desktop mode when coupled to a dock (e.g., acharging dock), when the payment terminal 1 is resting with an imaginarysupport plane extending between a first and second support point on theterminal 1 substantially perpendicular to a gravity vector, when thefirst and second support point on the terminal 1 are simultaneouslycoupled to a surface, or in response to any other suitable eventindicative of payment terminal 1 coupling to a surface. The paymentterminal 1 can be operable in the mobile mode when an on-board motionsensor (e.g., accelerometer, gyroscope, etc.) measures movement above apredetermined jerk, acceleration, or velocity, when the first and secondsupport points are not simultaneously coupled to a surface, when a thirdsupport point (e.g., in a handle 310) is coupled to a surface, or inresponse to any other suitable event indicative of payment terminal 1usage in a handheld or mobile application. The payment terminal 1 canhave the same or different functionalities when in the desktop mode ormobile mode. In one example of the latter variation, the paymentterminal 1 can selectively enable a first set of applications anddisable a second set of applications or functionalities (e.g., camera,functionalities, etc.) when in the desktop mode, and selectively enablethe second set of applications and enable the first set of applicationsor functionalities when in the mobile mode.

As shown in FIG. 10, the payment terminal 1 can additionally include aset of indicators 420 that function to indicate an interaction status.Examples of interaction statuses that can be indicated include cardinsertion status (e.g., successful card insertion, failed cardinsertion, etc.), payment entry status, user prompts (e.g., for requireduser actions), merchant prompts, or any other suitable interactionstatus. The indicator can be a set of light emitting elements (e.g., afirst and second light emitting element), an audio output, a userinterface element (e.g., an icon, etc.), or any other suitableindicator. One or more indicators of the set of indicators can becontrolled by the main processor 110, the secure processor 210, thepayment hardware 250, or any other suitable component. In one example,the hybrid card reader 252 can include a set of light emitting elements(e.g., LEDs, OLEDs, etc.) triggered by the switch (e.g., through thesecure processor). In a specific example, the light emitting elementsemit light having a first frequency in response to switch operation inthe coupled mode, and emit light having a second frequency in responseto switch operation in the uncoupled mode. The light emitting elementscan be arranged along a protrusion of the hybrid card reader 252,wherein the protrusion can additionally house the magstripe reader 253.However, the indicators can be arranged in any other suitable location.

The payment terminal 1 can additionally include a security mesh 212 thatfunctions to detect tampering. The security mesh 212 is preferablyconnected to the secure processor, but can alternatively or additionallybe connected to the main processor or any other suitable processingsystem. The security mesh is preferably arranged along the interfacebetween the printer body and the secure processor (e.g., wherein thecard reader body is metallic and coupled to the secure display), but canalternatively be arranged about the secure processor, around the IC chipreader, arranged between the secure display and secure processor,arranged along the junction, or arranged along any other suitableportion of the payment terminal 1. The security mesh can have adjacentground and power wires (e.g., wherein the ground and power wires arearranged in a single plane in a boustrophedonic pattern), interwovenground and power wires, or any other suitable security mesh.

4. Specific Examples

In a first example of the payment terminal 1, as shown in FIG. 2, thepayment terminal 1 includes a main display 120, a main input device 160,a main processor 110, a main input processor 140, a secure display 240,a secure input device 230, a secure processor 210, a secure inputprocessor 220, and a power source 600. The main input device 160 is onlyconnected to the main input processor 140 and the power source 600,directly or indirectly through the main input processor. The remainderof the components can be directly connected to the power source 600 orindirectly connected to the power source 600 through an intermediaryprocessor. The secure input device 230 is only connected to the secureinput processor 220 and the power source 600, directly or indirectlythrough the input processor. The main processor 110 is connected to andreceives data from the main input processor 140 and secure inputprocessor 220. The main processor 110 is connected to and sends data tothe main display 120 and secure display 2400. The secure processor 210is connected to and receives data from the secure input processor 220.The secure processor 210 is connected to the main processor 110 by awired connection 800, wherein the wired connection is preferably theonly connection between the secure processor 210 and main processor 110.The connection 800 is preferably a one way connection, such that thesecure processor 210 preferably is capable of only sending data 202 tothe main processor 110 over the connection 800, but can alternatively oradditionally be a two way connection such that the secure processor 210can receive data from the main processor 110. However, the processorscan be otherwise connected. The secure processor 210 is operable betweena secured and unsecured mode, wherein the secure processor 210 does notforward unsecured input coordinates to the main processor in the securedmode, and forwards unsecured input coordinates received from the secureinput processor to the main processor 110 in the unsecured mode. Thesecure processor, in the secured mode, can send events descriptive ofuser interactions to the main processor (e.g., key pressed, usercancelled, user deleted key, etc.). The payment terminal 1 canadditionally include a hybrid card reader 252, wherein the hybrid cardreader 252 is only connected to and configured to send information tothe secure processor 210. The hybrid card reader 252 can additionally beconnected to the power source 600, indirectly or directly. The paymentterminal 1 can additionally include a printer 500, wherein the printer500 is connected to and controlled by the main processor 110. Thepayment terminal 1 can additionally include a set of sensors 400, suchas cameras, wherein the sensors 400 are connected to and sendinformation to the main processor 110.

The main input device 160 and secure input device 230 are bothtouchscreens and overlaid over the main display 120 and secure display240, respectively. The main display 120 and the secure display 240 areboth LCD displays. The main display 120 is larger than the securedisplay 2400. In a specific example, the main display 120 length can betwo times the width of the secure display 240, wherein the main display120 width can be substantially equal to the secure display length. Themain display 120 and secure display 240 can be joined along a junction320 formed by the housing 300, forming a secure side 201 including thesecure display 240, secure input device 230, secure input processor 220,and secure processor 210, and a main side 101 including the main display120, main input device 160, main input processor 140, and main processor110. The wired connection extends across the junction 320. In a specificexample, a lateral edge of the main display 120 is joined to alongitudinal edge of the secure display 2400. The hybrid card reader 252is arranged along the junction 320, with the opening extending along thejunction 320 and the card reader body extending parallel the securedisplay 2400. The power source 600 (e.g., battery) is arranged parallelthe main display 120 proximal the main display back surface, proximalthe end of the main display 120 distal the junction 320 (distal maindisplay end). The main processor 110 is arranged between the powersource 600 and the junction 320. The printer 500 is arranged along aportion of the secure display back surface. In a specific example, theprinter 500 is arranged along an end of the secure display back surfacedistal the junction 320 (distal secure display end). The gap of theprinter 500 is oriented to be substantially parallel with the distalsecure display end. The gap includes toothed separation mechanisms 560along both longitudinal edges of the gap. The printer door 540 isarranged distal the secure display back surface, with the hinge 580distal the distal secure display end, such that the printer door 540opens away from the secure display 2400. The housing 300 preferablytraces the surfaces of the printer body 510, remainder of the securedisplay back face, and main display 120 to cooperatively form a handle310. The weight of the printer 500 preferably counterbalances the weightof the power source 600. A first contact surface 340 is defined alongthe distal main display end) and a second contact surface 340 is definedalong a longitudinal, arcuate surface of the printer 500 (e.g., alongthe printer body 510 or the printer door 540). A first camera isarranged along the side of the secure display 240, proximal the distalsecure display end, and is oriented with the camera active surfacenormal vector substantially perpendicular the second contact surfacenormal vector (e.g., perpendicular a gravity vector). The paymentterminal 1 can additionally include a power and data connector arrangedbetween the processor and power source 600, along a longitudinal side ofthe main display 120. The payment terminal 1 can additionally include aset of docking connectors arranged along an arcuate surface of theprinter body 510, configured to connect to an external dock. The powerand data connector and docking connectors are connected to the powersource 600. The payment terminal 1 can additionally include a WiFitransceiver configured to communicate with a remote device, an NFCtransceiver, a Bluetooth transceiver, a beacon transceiver, or any othersuitable communication mechanism. The short-range communication modules(e.g., NFC, Bluetooth, beacon, etc.) that function as payment hardwareare connected to the secure processor 210. The long-range communicationmodules are connected to the main processor 110.

In a second example, the payment terminal 1 includes a single display(secure display 240) and a single input device (secure input device230), a main processor 110, a secure processor 210, a secure inputprocessor 220, a power source 600, and a set of payment hardware 250(e.g., short-range communication modules, card reader, etc.). The singleinput device is only connected to and sends information to the secureinput processor 220. The secure input processor 220 is connected to andsends information to the main processor 110 and the secure processor210. The main processor 110 is connected to the secure input processor220, the power source 600, and the display. The secure processor 210 isonly connected to the power source 600, the payment hardware 250, themain processor 110, and the secure input processor 220. The secureprocessor 210 is connected to the main processor 110 by a power and datacable. The secure input processor 220 is operable between a securedmode, wherein information is sent to the secure processor 210, and anunsecured mode, wherein information is sent to the main processor 110.The secure input processor 220 switches between the secured andunsecured mode in response to a switching event. The switch event can bethe initiation of a payment flow (e.g., in response to selection of a“charge” icon), the receipt of financial transaction information fromthe payment hardware 250, the detected position of the payment terminal1, or any other suitable event. In a first specific example, the paymentterminal 1 can operate in the unsecured mode in response to theaccelerometer indicating a first terminal orientation, and in a securedmode in response to the accelerometer indicating a second terminalorientation (e.g., opposing the first orientation). In a second specificexample, the payment terminal 1 can operate in the unsecured mode inresponse to a switch operating in a first position, and in the securedmode in response to the switch operating in a second position. Theswitch is preferably switched from the first to the second position whenthe terminal 1 is rotated about a rotational axis substantially normalto a terminal contact surface 340.

Although omitted for conciseness, the preferred embodiments includeevery combination and permutation of the various system components andthe various method processes.

As a person skilled in the art will recognize from the previous detaileddescription and from the figures and claims, modifications and changescan be made to the preferred embodiments of the invention withoutdeparting from the scope of this invention defined in the followingclaims.

We claim:
 1. A module for a payment terminal including a main processor, the module comprising: a display; an input device associated with the display, the input device configured to generate input signals indicative of user inputs; a secure input processor separate and distinct from the main processor, the secure input processor connected to the input device and configured to generate input coordinates based on the input signals; a secure processor connected the secure input processor, the secure processor configured to be connected to the main processor at a secure processor output, the secure processor operable between: a secured mode, wherein the secure processor interprets the input coordinates received from the secure input processor based on a locally stored coordinate map; and an unsecured mode, wherein the secure processor outputs the input coordinates at the secure processor output; wherein the display is configured to be connected to and controlled by at least one of: the secure processor and the main processor. 